Overview

overview

10

Static

static

10

2908-13-0x...ry.exe

windows7-x64

2908-13-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2908-13-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    6d4a5888ef5830b77ca5e4e6e3478a31

  • SHA1

    00f7b500c104d927ca7c8d537f7b7d75c6363ec1

  • SHA256

    8f0a6376cfdee356b07604172a24be8f79b665d49a9129a4fcf842cda04d33e9

  • SHA512

    872b65061ca92c7fdd4e3fcee3f6a79b6519fec52fa52ab2bcfe8fe84e2a617751defe5337e701888a8b987163bb375dae65310f26b24f0c30ff226cbfcee706

  • SSDEEP

    3072:OqRr2eOOeuFp0AqpEiewxHXeH2lHGj8N5PibklteP9N:OqN2eOOeuFp0tpveaHXeHcGj8ybk7

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://discord.com/api/webhooks/1181894413438439434/9bOHVO843L8CrAC0uc2nEWNawAnthabqbd_3QLkg4EwlDdJ0KycDbG1rrLXUyDx--pB7

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2908-13-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections